diff options
| -rw-r--r-- | hosts/ahmed/nginx/default.nix | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/hosts/ahmed/nginx/default.nix b/hosts/ahmed/nginx/default.nix index 24dde85..55e6925 100644 --- a/hosts/ahmed/nginx/default.nix +++ b/hosts/ahmed/nginx/default.nix @@ -15,4 +15,38 @@ # Allow HTTP connections. networking.firewall.allowedTCPPorts = [80 443]; + + services.fail2ban = { + enable = true; + + jails = { + "nginx-http-auth".settings = { + enabled = true; + port = "http,https"; + filter = "nginx-http-auth"; + logpath = "%(nginx_error_log)s"; + }; + + "nginx-botsearch".settings = { + enabled = true; + port = "http,https"; + filter = "nginx-botsearch"; + logpath = "%(nginx_access_log)s"; + }; + + "nginx-forbidden".settings = { + enabled = true; + port = "http,https"; + filter = "nginx-forbidden"; + logpath = "%(nginx_error_log)s"; + }; + + "nginx-sslerror".settings = { + enabled = true; + port = "http,https"; + filter = "nginx-bad-request"; + logpath = "%(nginx_error_log)s"; + }; + }; + }; } |